RootKit & Services.exe

Just looked at the "sticky" suggestion regarding "Block Rootkit/Driver Service Installation" being TICKED & your advise to have UN-TICKED protection > services.exe "install drivers/services." Is this still valid? The posts are very old. Why should is this?

Rico, In version 3.150 you should normally have all four global protections enabled, this in effect will stop any untrused driver/service such as a rootkit from being installed
You can give protected programs any allows they need to run by adjusting their individual flags but remember that protected list items must be from a trusted source.